Cookies
There is one cookie
This site sets a single cookie, and only once you put something in your basket.
| Name | What it does | Lifetime |
|---|---|---|
olv_cart |
A random token that points at your basket on our server. It holds no personal data and no prices, just an identifier for a basket. | 30 days |
It is marked HttpOnly and Secure, so it cannot be read
by scripts and never travels unencrypted. The value stored in our database is a
hash of it, not the token itself, so a copy of our database would not let anyone
open your basket.
Why the notice does not ask you to choose
There is a short notice at the bottom of the screen the first time you arrive. It tells you about the cookie above and has one button, which dismisses it. It does not offer you an accept and a reject, and that is deliberate rather than lazy.
Consent is required for storing or reading information on your device unless it is strictly necessary to provide the service you asked for. A basket token is the textbook example of strictly necessary: without it, adding something to a basket does not work. A reject button would therefore be a lie, because refusing would either change nothing or break your basket.
Everything else that would normally trigger a banner is simply absent here:
- No analytics cookie. Our analytics runs on our own servers and stores no identifier in your browser.
- No advertising or remarketing pixels. None, from anyone.
- No embedded third party content . No fonts from Google, no embedded videos, no social widgets. Our fonts and icons are served from our own domain precisely so that visiting this page does not tell anybody else you visited it.
- No cross site tracking, because there is nothing to track with.
So there is nothing to ask you about. The notice is there to tell you what we already do, which is the part you are entitled to, and then to get out of the way.
If this ever changes
Adding any third party script, embedded font, pixel or analytics service to this site would end that exemption, and the notice would have to become a real consent banner with a working reject button. That is a deliberate constraint on how this shop is built, not an oversight.
What your browser stores by itself
Two small things are kept in sessionStorage, which is not a cookie,
is never sent to us, and is erased when you close the tab:
- Which campaign link you arrived from, if any, so a purchase can be attributed to it.
- A flag noting that this visit has already been counted, so one person reading five pages counts as one visit rather than five.
Neither identifies you, and both disappear with the tab.
One thing is kept in localStorage, which does survive closing the
tab: a single flag recording that you dismissed the cookie notice, so that it does
not greet you again on every page you read. It holds the number one and nothing
else. Clearing your browser storage brings the notice back.
Refusing cookies
You can block cookies in your browser. Everything on this site still works except the basket, which will forget what you put in it, and there is nowhere else for it to be remembered.